Try now

Program info

Estimated safety rating

 msmpeng.exe

msmpeng.exe is a program which is most likely NOT a virus or malware. So, if msmpeng.exe is on your computer, it is most likely ok, and will NOT be a cause for concern. Even if your PC is clean, it is still recommended to purchase a well-known antivirus with a good track record, in order to yourself your PC against viruses and malware.

Executable file path

 C:\Program Files\Windows Defender\MsMpEng.exe

Normally, this program is stored in C:\Program Files\Windows Defender\MsMpEng.exe.

MD5 hash of the executable file

 e5f051ad271423119200e5269d8c1c3c

The MD5 checksum for this executable is e5f051ad271423119200e5269d8c1c3c.

Is running as a service

 Yes

This program is registered as a Windows service. This means it operates on your system in background, usually without displaying anything to you. Most Windows services are legit programs, which perform useful functions to other programs or to the Windows Operating System.

Belongs to the operating system

 Yes

msmpeng.exe appears to have something to do with Windows SFC (System File Checker) or Windows File Protection.

Is a 64 bit executable file

 Yes

64-bit code has been detected. This program can exploit the full power of a modern PC cpu.

File description

 Antimalware Service Executable

The description present in the program is Antimalware Service Executable.

File version

 4.11.15063.447 (WinBuild.160101.0800)

File version extracted from the file 4.11.15063.447 (WinBuild.160101.0800).

Manufacturer

 Microsoft Corporation

Company Microsoft Corporation.

Copyright

 © Microsoft Corporation. All rights reserved.

Legal copyright notice © Microsoft Corporation. All rights reserved..

Digitally signed

 Yes

msmpeng.exe has a digital signature. Nowadays most legit programs are digitally signed.

Valid digital signature

 Yes

The digital signature attached to msmpeng.exe checks out perfectly. This is most likely a clean, ok program.

Certifier name

 Microsoft Corporation

Digital certificate name: Microsoft Corporation

Issuer name

 Microsoft Code Signing PCA

Certificate's issuer name: Microsoft Code Signing PCA

Can be uninstalled

 No

This executable does NOT have an uninstall routine set up in registry.